libera/#devuan/ Saturday, 2024-11-09

emanuelhttps://mxtoolbox.com/SuperTool.aspx?action=blacklist%3amx1.emanuel-loos.eu&run=toolpage00:01
rwpThe people who are needed to understand and deal with this are not online at the moment.  Please have patience and stay connected and I am sure things will be understood and resolved when they do come online and look at the problem.00:15
rrqemanuel: did you add a web link and/or adescription?00:15
emanuelGreat, thanks! I should mention, I tried registering again with the same usernames a few times, because it did not work.00:16
emanuel*with the same username and email ("EmanuelLoos", "mail@emanuel-loos.eu")00:17
rrqI've cleared your username + email for another try, but the spammer hammer has a number of words it doesn;t like00:17
emanuelWords?00:18
rrqthe exact reason was emailed to bgstack15 who's (I guess) rejuvenating at the moment00:18
rrqyes.. spammers like to advertise in the descripton + url00:19
emanuelWhat would it check for words? You mean parts of the email address? It did send me a confirmation email.00:19
rrqif you paste yours somewhere I could have a look and maybe teach the spammer hammer something00:20
rrqyour description00:20
emanuelwhich description do you mean? I was not asked for a description upon registering.00:22
emanuelI just filled out this form: https://git.devuan.org/user/sign_up00:22
rrqand you didn't set url and description later?00:23
rrqprofile stuff00:23
emanuelThe account got deleted after a few minutes. There was no time to do that.00:24
emanuelShould I try again and add a description within these few minutes?00:25
rrqno doesn;t need desription... something else; hmm maybe we need to wait for bgstack15 to check the spammer hammer report00:26
emanuelThe link from the first confirmation mail was not used, because I opened it on my phone without knowing that it would ask me for my password again.00:28
emanuelAfter opening it on my phone it was unusable on the Devuan desktop: "Dein Bestätigungs-Code ist ungültig oder abgelaufen." (it was invalid)00:29
rrqah. maybe that was enough to triggere the spammer hammer ... your login details are now cleared so maybe it works if you try again00:31
emanuelGreat, I'll try, thanks!00:31
emanuelLast time I also forked a repository to create a pull request. Could that be the reason?00:34
emanuelThis one: https://git.devuan.org/devuan/unattended-upgrades00:34
rrqno, would be due to the second registration while the first was unfinsihed00:35
emanuelAccount got deleted again.00:35
emanuelI did not do anything with it this time, except search for "unattended-upgrades" and view the repository.00:36
rrqhmm.. yes I see now; the hammer doesn't like the "-" in your email domain ... give me a sec.00:37
rrqsorry about that. it should be better now, if you try yet again.00:38
emanuelTried again, let#s wait and see.00:40
emanuelWhy would a "-" in an email domain have something to do with spam?00:41
rrqin this case it was a bug; "-" is an allowed domain character; the particular spam rule verifies that the registration domain is acceptable00:44
emanuelI see. For now it seems to work, thanks. I was able to create the pull request again: https://git.devuan.org/devuan/unattended-upgrades/pulls/200:47
emanuelBy the way, who reviews and merges these?00:48
rrqthe package maintaner(s) .. mostly LeePen I think00:49
fsmithredemanuel, as I mentioned before, we no longer fork that package00:50
fsmithredso any merge request would need to be made to debian00:50
emanuelOh, I see. But it is a Devuan-specific change.00:51
rrqhmm .. is unattended-upgrades still forked?00:51
rrq(sorry I'm slow)00:52
fsmithrednot in chimaera or excalibur/ceres00:52
fsmithredprobably not in daedalus too, but that's not enabled here.00:52
rrqright; not since "ascii"00:53
fsmithredthat seems so long ago...00:53
fsmithredemanuel, what kind of change?00:54
fsmithred(I guess I could look at the diff you linked)00:54
rrqthe fork was dropped since it was merely "branding" and not for "systemd avoidance" ... due to too few maintainers00:58
fsmithredI've never used unattended-upgrades00:59
emanuelchanging "beowulf" to "daedalus" (being the current stable release) in the configuration file as it is a hassle to change it to the current release everytime you install it.00:59
fsmithredit doesn't use sources.list?00:59
rrqemanuel: you could step in as maintainer for it if you like01:00
emanuelThere is a configuration file at /etc/apt/apt.conf.d/50unattended-upgrades defining which repos should be updated automatically. By default only scurity updates.01:01
rrqget in touch with LeePen on #devuan-dev for that01:01
rrqthough he's in UK so probably asleep right now01:03
emanuelIs it still forked or does it come from debian?01:04
emanuelBecause this repo seems to include Devuan support as well.01:05
emanuelhttps://github.com/mvo5/unattended-upgrades01:05
rrqthe daedalus version is 2.9.1+nmu3 ... so it's not a forked package01:05
fsmithredgithub?01:06
emanuelYes: https://qa.debian.org/cgi-bin/vcswatch?package=unattended-upgrades01:07
emanuelThe Debian version uses: "${distro_codename}" That seems smart. Would that work for Devuan just like that as well?01:09
rrqthe +nmu3 part indicates that the version is a non-maintaner update; apparently not really maintaned by debian (either)01:09
rrqhmm but there is a 2.11 in excalibur01:10
emanuelThe package probably does not need to change much. And after being configured correctly it works just fine. Though it needs cron and doesn't install cron automatically when installed.01:13
emanuel* change much in newer releases01:14
rrqhmmm 2.11 has "Devuan Developers" as maintainer01:14
rrqwith Vcs-Git: https://github.com/mvo5/unattended-upgrades.git01:16
rrqthat's quite bad QA by debian01:16
rrqI don't think we want microsoft hosted source01:16
rrqOriginal-Maintainer: Michael Vogt <mvo@debian.org>01:17
emanuelI don#t think Debian source should be hosted my Microsof either.01:19
emanuel*don't *Microsoft01:20
rrqdebian supposedly keeps source at https://salsa.debian.org/01:20
emanuelThat's where I searched first: https://salsa.debian.org/public?name=unattended-upgrades01:21
rrqbut that non-maintainer update seems to have passed through the QA01:21
emanuelThere's only a 4-year old mirror of https://github.com/rbalint/unattended-upgrades over there.01:21
rrqyes; and it's a rather significant package security-wise01:22
emanuelIt is i nice package, though. And it still works well.01:22
rrqI wish we had someone stepping up to maintain a devuan fork01:22
fsmithredI downloaded and unpacked 2.11 - there's no changelog, the files are dated may 2601:23
fsmithredcontrol file says devuan developers01:24
fsmithredbut there's no suites/unstable branch on git.devuan.org01:24
rrqyeah I guess Michael Vogt has picked up good stuff and focussed on the functionality more than formalia01:26
rrqusually one would give credit though01:27
emanuelI don't think I could maintain the C code: https://git.devuan.org/devuan/unattended-upgrades/src/branch/master/unattended-upgrade01:29
fsmithredanother option is to make a package that does a dpkg-divert to replace the config file01:30
fsmithredbut then you have to know to install that package01:30
rrqthere's no C code in 2.11 .. a bit of py instead; and it seems to facitiltate various distros01:31
rrqbut some systemd infection01:34
emanuelI'm not sure, I'm not that good at coding. On the other hand, if the package works fine after having no maintiner for so long, perhaps there's not much that needs to be changed in the code?01:35
rrqyeah I think it might need a bit of coding skill. don't feel pushed into it.01:42
emanuelSorry, I was mistaken: It was python in the other versions as well.01:42
emanuelWill the package be kept, even thoug it has no maintainer?01:44
rrqmaybe provide your patch as a a bug report to bugs.debian.org; the package does include a Devuan "module" so it should be acceptable.01:44
rrqbut check out 2.11 first01:45
emanuelhttps://qa.debian.org/popcon.php?package=unattended-upgrades01:45
emanuelWhere is 2.11?01:45
emanuelYou mean on github?01:45
emanuelOr the old salsa mirror?01:45
rrqhttps://pkginfo.devuan.org/cgi-bin/package-query.html?c=package&q=unattended-upgrades=2.1101:46
rrqyou can download that package via the filename link01:47
rrqit's dependencies seem fine on daedalus01:47
rrqits01:48
onefangSince one of my TODO's for apt-panopticon is to do a deep dive into various bits apt source code, to see if there's anything tricksy they do I might need to test for ... I'm likely to see things I want to fix, ... but I just don't have time to take over unattended-upgrades, which I don't use.  Then you mentioned Python, one of my least favourite languages.  lol01:48
emanuelit says: //      "o=Devuan,n=beowulf";01:49
* rrq biab01:49
emanuelWhy does no one use automatic (security-)updates?01:51
emanuelEven the installer asks the user if they should be activated. If the user answers yes, this package gets installed.01:52
onefangAs an experienced sysadmin, my habit is to let others try updates first, and update things on my time.01:52
emanuelEven security updetes?01:52
onefangSo what if the security update goes wrong just after I went to bed?01:53
emanuelThat never happened to me. On the stable release, packages usually have been tested for a long time before being added to the package repos.01:55
onefangI'd rather test it on a non production system first, then decide when it's time to update servers and stuff.  SErver might be too busy for an update to that part right now.01:55
onefangSo, in short, I know what I'm doing and decide to do it manually, coz that's better for me.01:56
onefangFor many others automated updates might be good.01:57
emanuelI guess the impact of an update going wrong also depends on what the server is doing. With a small private server, I could live with it not working over night. With a huge online service the priprities might be different.01:58
onefangExactly.01:58
onefangSo I set aside a certain time of the day for doing maintenance on my virtual world server, coz I know that's it's least busy period.  Don't want to pull the virtual world out from anyone suddenly.02:01
emanuelI also might not ssh into it for a week (as long as it works).But it needs to stay secure, so I use unattended-upgrades. Thera are also many devuan LXC containers on there, which all need their own updates.02:01
onefangI use the Debian Security RSS feed to let me know when security updates are available, and have cron jobs emailing me about updates available.  Though in my case, since I regularly check apt-panopticon, I'll tend to notice an update arriving by seeing all the mirrors updating to it eventually.02:10
onefangOrdinary users might just want to get their updates dealt with automatically though.  Something they don't need to think about.02:12
emanuelBy the way, If an unattended upgrade fails, the packages are just kept back: https://paste.debian.net/1334972/02:13
emanuellogin and psswd faailed and were kept back for me tu aupdate them manually with apt upgrade.02:14
emanueljust now02:15
emanuelI had no problem updating them manually.02:15
emanuelThe package should have some kind of stronger depandancy on cron, though. It is easy to forget installing cron and wonder why unattended-upgrades are not working.02:19
emanuelThe failed unattended upgrade was on testing, by the way.02:20
emanuelLookupError: unknown encoding: idna02:57
emanuelseems to be an error in unattended-uphrades, though-02:58
emanuelunattended-upgrades can be manually runt using: unattended-upgrade -d03:01
emanuelto get a debug log, that's what I did.03:02
onefangGotta reboot after this upgrade, so BRB.13:27
systemdleteHmm. Back in the old days, I could install "beep" and then I could call "beep" from a script, or the cmd line directly, and it worked.  It beeped.  Wow.  Simple.22:40
systemdleteNowadays, you have to create a udev rule, a user group, add users to the group, and probably login again to the console to get this working?22:41
systemdleteSo I have to do handsprings and headstands to do what used to be... simple.22:41
onefangThat'll be why I've been working on my aataaj.lua script, making it simpler.22:42
systemdleteI guess the issue is that the installer scripts for the beep package can't tell where a distro's udev rules directory is, at least from reading the PERMISSSIONS.md file on this.  But wouldn't there be sort of a standard set of directories to look in, and if the installer still can't find it, say so and quit?22:43
systemdletethanks onefang.22:43
gnarfaceworked for me on daedalus...22:43
onefangThough I haven't investigated beep yet.22:43
gnarfacedidn't have to do any udev rule tweaking22:43
rrqmay need to load pcspkr22:44
gnarfacenot that i recall anyway22:44
onefangBeep is just an ALSA thing?22:44
systemdleteLook, I totally get that we need security.  But this seems like the lamest of all things to me.  Yes, distros vary but this sort of procedure is kind of normal I think22:44
gnarfacepcspkr is loaded here22:44
systemdleterrq:  Could be, but then it should be part of the dependencies and install process.22:44
systemdlete(script)22:44
rrqthat's for beeping with the PC speaker .. there's also an option to "beep" via sound card22:45
systemdletepcspkr is loaded here too22:45
rrqI've forgotten the module name22:45
systemdleteis it still possible to send a ^G (bell) to the console?22:45
systemdleteor a vtty?22:46
systemdlete(use to work back in the day)22:46
rrqshould work on console22:46
rrqnot sure about terminal emulators22:47
onefangBeeping via PC speaker wont work here, there isn't one, though there is a socket to plug one in.  Doing anything via the sound card is problematic on my desktop with 13 of them.  Hence why I'm writing aataaj.lua to search for and attach everything properly.22:47
systemdleteegads22:48
onefang4 on the motherboard, 6 on the graphics card, neither of which I bought for sound, that's what the 3 USB sound devices are for.22:48
rrqmight be snd-pcsp22:49
systemdleteroot is not allowed to beep for security reasons, per the same md file22:49
systemdletebut22:49
rrqhas "index" parameter for selecting soundcard22:50
onefangAfter starting on this script, I'm finding out graphics cards tend to be like that, more audio devices than they should have.22:50
systemdleteneedrestart beeps happily22:50
systemdlete(run as root!)22:50
onefang"index" usually means the ALSA index for that sound device, in your .asoundrc file index refers to the order in that file.22:50
systemdleteI guess needrestart is recognized for access to the output device somehow22:51
systemdleteI don't mind configuring beep, per the .md file instructions for a system, but having to do this on every system will be a pain22:53
XenguyFWIW one of my laptops used to beep annoyingly often, and I was able to turn that off in the BIOS settings somewhere22:54
XenguyPCs should be seen and not heard  = )22:54
rwpHumorously I always blacklist pcspkr and snd_pcsp in order to prevent any beeping from happening.22:56
onefangThis is why I did track down which of my graphics cards 6 audio devices is actually connected to my only monitor with speakers.  I route notification sounds to that monitor.  xscreensaver turns that monitor off when it blanks.  No notification sounds while I sleep.  B-)22:56
rrqhmm snd-pcsp is a sound card for playback on the PC speaker; not a PC speaker emulation via sound card22:56
onefangAh, maybe I should install that for my aataaj.lua testing?  I don't usually coz of the lack of said speaker.  Give my desktop 14 sound devices.  lol22:58
systemdleteIs there a TLDR file for linux sound, as opposed to the 12-volume set we are ordinarily forced to read to use simple stuff these days?  Just asking22:58
onefangOnce aataaj.lua is more mature, my answer would be "install and run it, if you need more details, read it".22:59
systemdleteIt's getting to the point where one almost needs a PhD to configure anything nowadays.22:59
systemdleteonefang, does it know how to safely escape, in case of an emergency landing?23:00
* systemdlete has been watching too many episodes of Mayday23:00
XenguyIn my experience, such as it is, sound has always been a bit of a shit-show in *nix23:00
onefangToo early in the morning for me to decipher that.  lol23:00
systemdleteXenguy, yup.23:00
systemdleteI think Xenguy just died and his brain spilled a core dump.23:01
XenguyHaving said that, I have never needed to modify the stock DE sound settings, which is to say that PA seems to work fine for my simple needs (knock on wood)23:01
Xenguy"Not dead yet"23:01
onefangHaving spent far too much time trying to get my script to get ALSA to behave, I keep thinking "this is why people keep putting more and different layers on top"  ALSA is sucky when you try to delve deeply.23:02
systemdletephew!  Good thing too, Xenguy I was getting worried23:02
XenguyNever fear, underdog is here!  But I digress23:03
systemdlete(one of my favorite cartoons)23:03
n4dirfun fact: until at least last year #ardour usually said to just use alsa23:04
n4diri'd probably just stick to alsa if it wasn't for certain things i do23:04
onefangThen fsmithred asked me to help out with his "speak as early as possible in the boot process" request, which fit into what I was doing.  So now I have two goals, tame ALSA and tame JACK.  JACK is currently tamed, ALSA is stil putting up a fight, but I almost got it sorted.23:05
systemdletedoesn't JACK use ALSA eventually?23:06
onefangNote that in my case pulse and pipe are not even installed, that's how I "tame" them.  B-)23:06
systemdleteI mean, depends on23:07
onefangYes, as daoes everything else.23:07
XenguyMy goal with sound is:  do nothing23:09
systemdleteonefang, I am willing to try out your script (when it's ready) on my test systems.  I have hardware and VM hosts23:10
XenguyIf it ain't broke, and all that rot23:10
systemdleteI still believe, however, there needs to be a way to uninstall it if a user wants to23:10
onefangMy goal with aataaj.lua is to help others do nothing.  B-)23:10
* systemdlete likes doing nothing23:10
systemdlete<323:10
n4diri kinda got used to jack, so i see no good reason to test pipewire23:11
systemdleteI don't know jack23:11
systemdlete:D23:11
onefangWell one of the things it's trying to tame is multiple sound devices, qemu doesn't allow that, I tried.  Dunno about the other VM systems.23:11
n4dirsystemdlete: i am pretty sure that if you don't do audio-production, it is pointless23:12
n4dirand even for that ...23:12
onefangAll working and no playing sounds makes JACK a dull protocol.  B-)23:12
systemdletedoes JACK work with JILL?23:12
n4dirlost23:13
systemdletenvm23:13
onefangJACK is basically the music production type layer on top of ALSA.  Works great for that sort of thing.23:13
systemdletejoke fail23:13
onefangAnd since I also do music production...23:13
rrqwhat do you mean with "qemu doesn't allow that"?23:14
rrqdoesn;t allow multiple emulated sound cards?23:14
onefangqemu doesn't allow more than a single sound device.  It has a few you can use, but only one at a time.23:14
rrqhmm there may be a qemy version code involved, since it has config for both guest sound cards and host sound cards associations23:15
onefangThough with some work I might be able to hook up a bunch of USB devices, but I just wanted to start testing on real hardware.23:15
rrq"it" = qemu 7++23:16
onefangIn my case, whatever qemu is installed on Daedalus.23:16
rrqnot that I have explored it much, but qemu takes device parameters and has guest vs host setups like all other devices23:17
systemdleteWhat is needrestart using to make beep?23:18
systemdleteit works, even inside VMs23:18
onefangI script my qemu, avoiding libvirt and friends.  That's exactly what I did when testing under qemu.23:18
n4diras i use qemu very seldom i just go for aqemu.23:19
rrqsystemdlete: check with strace .. I'd guess on ioctls23:19
onefangDuring early development work, sometimes it's better to just give up on some problematic side issue that isn't your main concern, and do something else.  I'll get back to VMs later, real hardware is more important.23:19
systemdleteI can live without beep.23:20
n4dirwhat you need it for, btw?23:20
onefangSo struggling with trying to get qemu to let my test on multiple audio devices wasn't getting anywhere, but testing on real hardware with real multiple devices did get me further.23:21
systemdleteI wanted to have a script ring the bell23:21
systemdleteor beep23:21
systemdleteI guess I could run a short soundfile that makes beep sound23:21
systemdletebut that seems clumsy23:21
n4dirsystemdlete: i had problems on the laptop, and the guy in offtopic told me as troubleshoot to run speaker-test (of which i never heard).23:21
n4dirno idea if that might be a workaround for you23:21
systemdleteI've tried that in the past.  And actually, onlinemictest.com has a speaker test, and I get sound from that.23:22
systemdleteAll I was looking for was a short, sweet little "beep"23:22
systemdleteor "boop"23:23
systemdleteand I can get sound from aplay23:23
onefangMy console "beep" is a ping sound, other notifications have other sounds.23:23
n4dirspeaker-test sounds just like white-noise23:23
n4dirthere is interesting stuff, beep like, in /usr/share/sounds/freedesktop23:26
n4dirprobably know that alreaday23:26
systemdletedo kernel packages (headers, image) take a loooooooong time in your qemu VMs?  I find they take an eternity in my VMs (and my vbox is configured for KVM as the virtualizer).23:27
onefangTake a loooooong time to do what?23:27
systemdleteI've straced dpkg process and it is calling the rename() system call zillions of times23:28
systemdleteinstall, sorry23:28
n4dirdidn't realize that23:28
systemdletebest way to play oga files n4dir?23:28
systemdleteaplay makes bad noise23:28
onefangI write my own mmdebstrap scripts for installing the OS on qemu.   I don't time individual package installs.23:29
n4diryeah, i wouldn't know. I played it with mocp for a quick test23:29
onefangI do note that one thing that does take up excessive time is the several times it creates the initramfs.  No idea why it does that when I start installing desktop packages.  lol23:30
systemdleteonefang, maybe for the DM?23:30
onefangDoesn't run out of initramfs.23:31
systemdleteand, yes, I found that too.  I keep 3 most recent kernels and it can take a long time to run initramfs23:31
systemdleteok, thanks all.  bbl need to reboot some systems...23:34

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!